We got used to companies abusing processes and not being punished. Just look at how all Big Tech companies systematically break laws and happily pays the fines for these crimes.
Whether punishment was sufficient is a different question.
The world is too complex to fully codify in rules and punishments, abusing loopholes (or taking punishment as cost of business) is still reprehensible. I do agree we should try to increase punishment/close loopholes when possible, it’s just always will be a losing battle.